harmful processes. Search results for \"malicious processes\"
When something is wrong in the system or we just want to check the effectiveness of the antivirus installed on the computer, we usually press the three cherished keys Ctrl, Alt, Del and launch the Task Manager, hoping to detect the virus in the process list. But in it we see only a large number of programs running on a computer, each of which is represented by its own process. And where is the virus hiding? Our article today will help you answer this question.
In order to determine whether there is a virus in the processes or not, you need to look very carefully at the list of processes. In the operating room Windows system Vista in without fail click the "Show processes of all users" button, otherwise you won't really see anything. First of all, pay attention to the description of the process in the "Description" column. If there is no description or it is somehow “clumsy”, this should alert you. After all, software developers have a habit of signing their creations in understandable Russian or English.
Having noted processes with a suspicious description with a glance, we turn our gaze to the next column - “User”. Viruses are usually launched on behalf of the user, less often in the form of services and on behalf of the system - SYSTEM, LOCAL SERVICE or NETWORK SERVICE.
So, having found a process with a suspicious description, launched on behalf of the user or it is not clear on whose behalf, right-click on it and select "Properties" in the context menu that appears. A window will open with the properties of the program that started this process. Pay special attention to the "Details" tab, which contains information about the developer, file version and its description, as well as to the "Location" item of the "General" tab - the path to the running program is indicated here.
If the "Location" path leads to the Temp directory, Temporary Internet Files, or some other suspicious place (for example, to the folder of some program in the Program Files directory, but you are sure that you did not install such a program), then this process MAYBE belongs to the virus. But all this is just our guesses, for detailed information Of course, it is better to turn to the Internet. There are good process lists at what-process.com http://www.tasklist.org and http://www.processlist.com. If, after all the searches, your fears about a suspicious process are confirmed, you can rejoice - a virus, trojan or other malware has settled on your computer, which needs to be urgently eliminated.
But the window with the properties of the file that launched the process from the Task Manager may not open. Therefore, in addition to standard Windows tools, you need to use various useful utilities that can provide maximum information about a suspicious process. One of these programs - Starter - we have already considered (http://www.yachaynik.ru/content/view/88/).
In Starter, the "Processes" tab provides comprehensive information about the selected process: a description of the program and the name of the file that launched the process, information about the developer, a list of modules (software components) involved in the process.
Thus, there is no need to delve into the properties of the file that launched the process - everything is as it is in the palm of your hand. However, this does not prevent you from right-clicking on the suspicious process and selecting "Properties" to get detailed information about the process file in a separate window.
To get to the program folder that the process belongs to, right-click on the process name and select "Explorer to Process Folder".
But the most convenient option in Starter is the ability to start searching for information about the process right from the program window. To do this, right-click on the process and select "Search the Internet".
After you get complete information about the file that launched the process, its developer, purpose, and opinion about the process on the Internet, you will be able to accurately determine whether the virus is in front of you or a peaceful hard worker program. The same principle applies here as in the Task Manager. Suspicious are those processes and process modules for which the developer is not specified, in the description of which there is nothing or something indistinct is written, the process or the modules involved by it are launched from a suspicious folder. For example, Temp, Temporary Internet Files, or from a folder in Program Files, but you remember for sure that you did not install the program indicated there. And, finally, if the Internet clearly states that this process belongs to a virus, rejoice - the malware did not manage to hide from you!
One of the most common misconceptions of beginner dummies concerns the svchost.exe process. It is written exactly this way and nothing else: svshost.exe, scvhost.exe, cvshost.exe and other variations on this theme are viruses masquerading as a good process, which, by the way, belongs to Windows services. More precisely, one svchost.exe process can start several system services at once. Since the services operating system there are many and all of them she needs, there are also a lot of svchost.exe processes.
On Windows XP, there should be no more than six svchost.exe processes. Five svchost.exe processes are normal, but already seven are a 100% guarantee that malware has settled on your computer. There are more than six svchost.exe processes in Windows Vista. I have, for example, fourteen of them. But there are a lot more system services in Windows Vista than in the previous version of this OS.
Another useful utility, Process Explorer, will help you find out which services are started by the svchost.exe process. Download latest version Process Explorer you can from the official Microsoft website: technet.microsoft.com
Process Explorer will give you a description of the process, the program that launched it, the name of the developer, and a lot of useful technical information that only programmers can understand.
Hover your mouse over the name of the process you are interested in and you will see the path to the file that launched this process.
And for svchost.exe, Process Explorer will show a complete list of services related to the selected process. A single svchost.exe process can run multiple services or just one.
To see the properties of the file that started the process, right-click on the process you are interested in and select "Properties" ("Properties").
To search for information about a process on the Internet using the Google search engine, simply right-click on the process name and select "Google".
As before, suspicions should be caused by processes without a description, without the name of the developer, launched from temporary folders (Temp, Temporary Internet Files) or from a folder of a program that you did not install, and also identified on the Internet as viruses.
And remember, for the Process Explorer and Starter programs to work properly in Windows Vista, they need to be run with administrative rights: right-click on the program executable file and select "Run as administrator".
However, I want to disappoint you, only very stupid viruses impersonate themselves in the process list. Modern virus writers have long since learned to hide their creations not only from the eyes of users, but also from anti-virus programs. Therefore, only a good antivirus with fresh databases (and even that is not a fact!), a backup copy with all your information, and a disk with a Windows distribution kit for reinstalling the system can save you in case of infection with a well-written malware. Nevertheless, it is still worth looking into the list of processes from time to time - you never know what scvhost or mouse.exe is hiding there.
Lecture 16 Types, methods and systems of car repair
16.1 Processes causing vehicle malfunction.
16.2 Current and overhaul cars.
16.3 Overhaul methods.
16.4 Production and technological processes for the repair of vehicles and their components.
During operation, cars are exposed to various external influences, under the influence of which their reliability is reduced due to the occurrence of malfunctions. As a result, work processes in the car are either disrupted or become impossible.
Characteristics of harmful processes that cause loss of vehicle performance
During the operation of automobiles, processes that cause damage and destruction of parts are called harmful. Damage to a part is a partial loss of its service properties. Destruction is any process that occurs in a material or on its surface, leading to the impossibility of performing the specified functions by the part. Harmful processes include: wear of the working surfaces of parts due to friction, destruction, damage to parts under the influence of various loads (plastic deformation, fracture, metal fatigue, thermal and electroerosive destruction), under the action of chemically active media (chemical and electrochemical corrosion, loss of the service properties reported by the part ( demagnetization, etc.), it is impossible to completely eliminate harmful processes.It is possible to slow down their course by carrying out maintenance and current repairs.
Types of wear of car parts
Wear is a process of gradual change in size and shape. body during friction, which manifests itself in separation from the surface of the material and in its permanent deformation. Wear is usually expressed in linear units, and sometimes in mass units.
Types of friction
Dry friction. This is the friction of the movement of two solid bodies without lubrication on contact surfaces. It can be obtained in its pure form under conditions of absolute vacuum, i.e. in the absence of impact environment. In practice, the operation of caterpillar links on sandy dry soil somewhat approaches the conditions of dry friction.
boundary friction - this is. friction. the movement of two solid bodies having on their surfaces an insignificant layer of lubricant (of the order of 0.1 microns), which has properties that differ from the bulk properties of liquids during liquid friction.
Fluid friction - the phenomenon of resistance to relative movement that occurs between two rubbing bodies separated by a layer of lubricant, in which its bulk properties are manifested.
Types of wear
Wear is divided into three main groups:
¾ mechanical;
¾ molecular mechanical;
¾ corrosion-mechanical.
Mechanical wear subdivided into abrasive and fatigue.
abrasive wear is a process in which rubbing surfaces are destroyed as a result of the scratching or cutting action of solid bodies or particles. A variety of abrasive wear is hydro- and gas-abrasive wear, when wear occurs as a result of the action of solid particles entrained, respectively, by the flow of liquid or gas. A kind of mechanical wear - cavitation wear of the surface during relative motion solid body in liquid under cavitation conditions. Hydraulic shock forms cavities with a diameter of 0.1 - 1.2 mm.
fatigue wear friction surface or its individual sections is the result of repeated deformation of microvolumes of the material, leading to cracks and separation from the surface layer of material particles. The main indicator of fatigue wear is the depth of the deformable layer on the friction surface. Fatigue wear is possible both with rolling friction and with sliding friction and depends on the specific pressure in the interface, the material properties of the part, and the frequency of load cycles.
Molecular mechanical wear subdivided into adhesive and selective transfer.
Adhesive wear occurs due to the occurrence of molecular (adhesive) interactions in certain areas of the contacting surfaces, the forces of which exceed the strength of the bonds of the surface layer of the material with the main material of the part. Pairs with metal surfaces are prone to adhesive wear. Adhesive wear is expressed in the deep tearing of the material and its transfer from one surface to another, which, as a rule, leads to jamming of parts.
Wear under selective transfer conditions is also characterized by atomic phenomena in the contact zone and is observed, for example, during friction of metal-polymer pairs, when the polymer is transferred to the metal surface, forming a monomolecular layer on it. The formation of an interlayer in this case favorably affects the frictional characteristics of the pair and leads to a sharp decrease in the wear rate.
Corrosion-mechanical wear subdivided into oxidative wear and wear during fretting corrosion.
Oxidative wear occurs when there are protective films on the friction surface formed as a result of the interaction of the material of the part with oxygen. The appearance of oxide films does not exclude, but accelerates the fatigue failure of the material, since as a result of the interaction of oxygen and metal, layers with increased brittleness are formed, which accelerate the destruction of the material.
Fretting wear occurs in the process of small oscillatory relative movements of contacting metal surfaces as a result of periodic deformations or vibrations of structural elements. This type of wear is typical for the surfaces of parts in fixed connections that perceive vibration loads (for example, the outer surfaces of the outer rings of ball and roller bearings, the surfaces of holes in bearing housings, in rivet joints operating under vibration load, etc.).
The main wear characteristics of car parts
Linear wear U is a change in the size of the part (sample) as a result of wear in the direction perpendicular to the friction surface.
Wear rate g=dU/dt is the ratio of wear to wear time. The wear rate can be used to judge the durability of the part.
Wear intensity j = dU/dS the ratio of wear to the friction path on which wear occurred, or to the amount of work performed, for example, to the operating time of the machine in cubic meters of excavated soil (if it is an excavator).
Wear resistance is the property of resisting wear under certain friction conditions. Wear resistance turned out to be the reciprocal of the wear rate or intensity.
Relative resistance - the ratio of wear resistance of a given material and a material taken as a standard, when they are worn under the same conditions.
AT last years Much attention is paid to improving the working conditions of users of electronic computers (PCs) and video display terminals (VDTs), despite the fact that the quality and safety of the PCs and VDTs are constantly improving. In developed countries, including the USA, Germany, Sweden, the issue of the dangers of working behind displays has risen to the level of a national problem, and in Germany, working behind displays is included in the list of 40 most harmful and dangerous professions.
Working with a personal computer- is the reproduction of visual information on the display, which must be quickly and accurately perceived by the user.
The main factor affecting people working with PCs and VDTs is comfortable and safe.
The working conditions of a user working with a personal computer are determined by:- features of the organization of the workplace;
- working environment conditions (lighting, microclimate, noise, electromagnetic and electrostatic fields, visual ergonomic parameters of the display, etc.);
- characteristics of information interaction between a person and personal electronic computers.
- increased temperature of PC surfaces;
- increased or decreased air temperature of the working area;
- release of a number of chemicals into the air of the working area;
- high or low air humidity;
- increased or decreased level of negative and positive air ions;
- increased voltage in the electrical circuit, short circuit;
- elevated level static electricity;
- increased level of electromagnetic radiation;
- increased electric field strength;
- lack or lack of natural light;
- insufficient artificial illumination of the working area;
- increased brightness of light;
- increased contrast;
- direct and reflected brilliance;
- eye strain;
- monotony of the labor process;
- neuro-emotional overload.
Working on a PC is accompanied by a constant and significant strain on the functions of the visual analyzer. One of the main features is a different principle of reading information than in normal reading. In normal reading, the text on paper, located horizontally on the table, is read by the worker with his head tilted when the light flux falls on the text. When working on a PC, the operator reads the text, almost without tilting his head, his eyes look straight or almost straight ahead, the text (the source is the luminescent substance of the screen) is formed on the other side of the screen, so the user does not read the reflected text, but looks directly at the light source, which forces the eyes and the organ of vision as a whole to work in an unusual stressful mode for a long time.
The disorder of the organs of vision increases sharply when working more than four hours a day. The World Health Organization (WHO) has introduced the concept of “Computer Vision Syndrome” (CVS), the typical symptoms of which are burning eyes, redness of the eyelids and conjunctiva, feeling of a foreign body or sand under the eyelids, pain in the eye sockets and forehead, blurred vision, delayed refocusing from nearby to distant objects.
Nervous-emotional stress when working on a PC arises due to lack of time, large volume and density of information, features of the interactive mode of communication between a person and a PC, responsibility for the accuracy of information. Prolonged work on the display, especially in the interactive mode, can lead to neuro-emotional overstrain, sleep disturbance, deterioration, decreased concentration and performance, chronic headache, increased excitability of the nervous system, and depression.
In addition, with increased neuropsychic stress, in combination with other harmful factors, there is a “release” of vitamins and minerals from the body. When working under conditions of increased neuro-emotional and physical stress, hypovitaminosis, a lack of trace elements and minerals (especially iron, magnesium, selenium) accelerates and exacerbates susceptibility to the effects of harmful environmental and industrial factors, disrupts metabolism, and leads to wear and aging of the body. Therefore, when constantly working on a PC to improve performance and maintain health, security measures include protecting the body with the help of vitamin-mineral complexes, which are recommended for everyone, even practically healthy PC users.
Increased static and dynamic loads among PC users lead to complaints of back pain, cervical region spine and arms. Of all the ailments caused by working on computers, those associated with the use of the keyboard are more common. During the period of data entry operations, the number of small stereotypical movements of the hands and fingers per shift can exceed 60 thousand, which, in accordance with the hygienic classification of labor, is classified as harmful and dangerous. Since each keystroke is associated with muscle contraction, the tendons continuously slide along the bones and come into contact with tissues, as a result of which painful inflammatory processes can develop. Inflammatory processes of tendon tissues (tendenitis) are collectively called “repetitive stress injury”.
Most workers sooner or later begin to complain of pain in the neck and back. These ailments accumulate gradually and are called “prolonged static load syndrome” (SDSS).
Another reason for the occurrence of ADHF can be a long stay in the “sitting” position, which leads to a strong overstrain of the muscles of the back and legs, resulting in pain and discomfort in the lower back. The main reason for straining the muscles of the back and legs is the irrational height of the working surface of the table and seat, the lack of a support back and armrests, the inconvenient placement of the monitor, keyboard and documents, and the lack of a footrest.
To significantly reduce the pain and discomfort experienced by PC users, frequent breaks in work and ergonomic improvements are needed, including workplace equipment so as to eliminate uncomfortable postures and prolonged stress.
Among the factors that worsen the health of computer equipment users are electromagnetic and electrostatic fields, acoustic noise, changes in the ionic composition of air and indoor microclimate parameters. An important role is played by the ergonomic parameters of the location of the monitor screen (display), the state of illumination in the workplace, the parameters of the furniture and the characteristics of the room where the computer equipment is located.
Since June 30, 2003, new Sanitary and Epidemiological Rules SanPiN 2.2.2/2.4 have been introduced. 1340-03 “Hygienic requirements for personal electronic computers and organization of work”. The requirements of the Sanitary Rules apply to computing electronic digital machines, personal and portable; peripheral devices of computer systems (printers, scanners, keyboards, external modems); information display devices (video display terminals - VDT) of all types, conditions and organization of work with a PC and are aimed at preventing the adverse effects on human health of harmful factors of the production environment and the labor process when working with a PC. Workplaces using PCs and premises for their operation must comply with the requirements of the Sanitary Rules.
Physically harmful and dangerous factors
Physical harmful and dangerous factors include: increased levels of electromagnetic, x-ray, ultraviolet and infrared radiation; increased level of static electricity and dust content in the air of the working area; increased content of positive aerons and reduced content of negative aeroions in the air of the working area; increased level of brilliance and blindness; uneven distribution of brightness in the field of view; increased brightness of the light image; increased voltage in the electrical circuit, the closure of which can occur through the human body.
Chemically harmful and dangerous factors
Chemical harmful and dangerous factors are as follows: increased content of carbon dioxide, ozone, ammonia, phenol and formaldehyde in the air of the working area.
Psychophysical harmful and dangerous factors
Psychophysiological harmful and dangerous factors: eye strain and attention; intellectual, emotional and long-term static loads; monotony of work; a large amount of information processed per unit of time; irrational organization of the workplace.
Typical sensations that PC operators experience by the end of the working day are: eyestrain, headache, pulling pains in the muscles of the neck, arms and back, decreased concentration.
Already in the early years of computerization, a specific visual fatigue among display users was noted, which received the general name "computer visual syndrome". One of the reasons is that the human visual system, formed over millions of years of evolution, is adapted to perceive objects in reflected light (printed texts, drawings, etc.), and not to work behind a display. The image on the display is fundamentally different from the objects of observation familiar to the eye - it glows, flickers, consists of discrete dots, and the color computer image does not correspond to natural colors. But not only the features of the image on the screen cause visual fatigue. The organ of vision experiences a great load when entering information, since the user is often forced to look from the screen to the text and keyboard, which are at different distances and differently illuminated. Visual fatigue is manifested by complaints of blurred vision, difficulty shifting gaze from near to distant objects and from far to near ones, apparent changes in the color of objects, their doubling, a burning sensation, "sand" in the eyes, redness of the eyelids, pain when moving the eyes.
long and intensive work on the computer can become a source of serious occupational diseases, such as repetitive stress injury (RTI), which is a gradually accumulating ailment that turns into diseases of the nerves, muscles and tendons of the hand.
Occupational diseases associated with ESRD include:- tendovaginitis - inflammation of the tendons of the hand, wrist, shoulder;
- tendosynovitis - inflammation of the synovial membrane of the tendon base of the hand and wrist;
- Carpal Tunnel Syndrome (CTS) - Caused by entrapment of the median nerve in the carpal tunnel. Accumulating trauma causes the formation of decay products in the area of the carpal tunnel, resulting in edema first, and then CTS.
There are complaints of burning pain and tingling in the wrist, palm, and fingers, except for the little finger. There is soreness and numbness, weakening of the muscles that provide movement of the thumb.
These diseases usually occur as a result of continuous work in an improperly organized workplace.
The mechanism of disturbances occurring in the body under the influence of electromagnetic fields is due to their specific (non-thermal) and thermal effects.
Specific impact EMF reflects biochemical changes occurring in cells and tissues. The most sensitive are the central and cardiovascular systems. Deviations from the endocrine system are possible.
In the initial period of exposure, the excitability of the nervous system may increase, manifested by irritability, sleep disturbance, and emotional instability. Subsequently, asthenic conditions develop, i.e. physical and mental weakness. Therefore, chronic exposure to EMF is characterized by: headache, fatigue, deterioration in well-being, hypotension (decrease in blood pressure), bradycardia (decreased heart rate), pain in the heart. These symptoms can be expressed in varying degrees.
thermal effect EMF is characterized by an increase in body temperature, local selective heating of cells, tissues and organs due to the transition of EMF into thermal energy. The intensity of heating depends on the amount of absorbed energy and the rate of heat outflow from the irradiated areas of the body. The outflow of heat is difficult in organs and tissues with poor blood supply. These primarily include the lens of the eye, as a result of which the development of cataracts is possible. Parenchymal organs (liver, pancreas) and hollow organs containing liquid (urinary bladder, stomach) are also exposed to thermal effects of EMF. Heating them can cause exacerbation of chronic diseases.
In a running car, along with useful ones, various harmful, destructive processes develop, under the influence of which the level of work processes decreases, and the technical and operational qualities of the car deteriorate. Work processes take place in the car during its operation, while harmful processes during the entire time of its existence.
Harmful processes include wear of the working surfaces of parts, metal fatigue, vibrations of units and mechanisms, internal stresses in parts, different kinds corrosion, aging, etc. According to the rate of occurrence, harmful processes are divided into 3 groups: fast, average speed and slow. Fast processes include vibrations of nodes, changes in friction forces in useful interfaces, fluctuations in work loads and other similar processes that affect the relative position of parts, assemblies and distort the cycle of the machine. In contrast to high-speed processes, the frequency of change, which is measured in fractions of a second. Slow processes can last for days or months (wear parts, metal fatigue, corrosion, etc.). Climatic operating conditions in relation to the temperature of the environment and the car itself, the humidity of the environment, the duration of the change, which can be measured in minutes and hours relative to average speed processes.
The development of harmful processes leads to an increase in the parameters of the flow of failures and a decrease in the reliability of the car.
To slow down the intensity of the manifestation of harmful processes is not only possible, but also necessary. During operation, this is achieved by carrying out maintenance and TR. Due to this, the flow of work processes increases, and the level of harmful processes decreases. To control harmful processes by the length of their negative effect on the performance of the car, it is necessary to know the essence of the physical phenomena that accompany these processes.
Depending on the state of the rubbing surfaces, the presence of lubrication between them, the following types of friction are distinguished (GOST 16429-70): friction without lubrication, boundary friction, and fluid friction. The friction of two solid bodies without lubrication occurs when there is no lubricant of any kind on the friction surface. Friction without lubrication is accompanied by elevated temperatures on the contact areas of the surfaces, as a result of which plastic deformation of the surface layers of the metal can take place, facilitating its wear. Seizure manifestations are possible at individual contact points, which is the most destructive type of wear. Boundary friction of two solid bodies that occurs when there is a layer of liquid on the friction surface that has properties different from the bulk ones. Boundary friction occurs in the presence of a very thin oil layer, about 1 µm thick. In boundary friction, the properties of boundary oil films differ from those of the lubricating fluid. The action of a lubricant during boundary friction depends not only on the viscosity of the oil, but also on the presence of surface-active molecules in it that can be absorbed on rubbing surfaces. Despite the action of surface-active molecules under high loads, the lubricating film is destroyed and the engagement and shearing of irregularities begins. At these moments, high local forces arise under the action of which the deepening of surface microcracks and wear occur. The expansion and deepening of surface cracks under the influence of surfactants is enhanced under the influence of a lubricating layer located inside the crack. Filling the surfaces of cracks in rubbing bodies, the lubricant exhibits a wedging effect on the crack walls, tends to expand them, and thereby reveals the destruction of a solid body. Fluid friction occurs between two bodies separated by a layer of fluid, in which its bulk properties are manifested. With fluid friction, the surfaces of the parts are completely separated by a layer of lubricant, so that there is no direct contact between them. The friction process is stable, the comparison with the movement of parts is determined by the viscosity of the oil, and wear is negligible. With poor oil filtration and contamination with various foreign elements, wear can become noticeably noticeable.